Fail-closed execution firewall for AI agents: quarantine MCP tools, proxy OpenAI-compatible requests, emit signed receipts, and verify EvidencePacks offline.
-
Updated
Oct 23, 2026 - Go
Fail-closed execution firewall for AI agents: quarantine MCP tools, proxy OpenAI-compatible requests, emit signed receipts, and verify EvidencePacks offline.
Approval-first MCP terminal control: inspect risk, permissions and limits before bounded execution, then keep signed receipts.
Active development continues at ScopeBlind/scopeblind-gateway. - Security gateway for MCP servers. Cedar policy engine, Ed25519-signed receipts, per-tool enforcement. IETF Internet-Draft. 4 patents pending. npx protect-mcp
Fail-closed Cedar policy gate plus signed receipts for AI agent tool calls. npx protect-mcp
MCP server for offline verification of signed artifacts. Receipts, manifests, bundles. Apache-2.0.
Open source shows what could run. Receipts prove what did run. A signed-receipt wrapper for the published xai-org/x-algorithm Phoenix demo pipeline. Apache-2.0.
Commitment-based selective-disclosure receipts. SHA-256 field commitments, algorithm-agile signing, chain integrity, SD-JWT-aligned salt-hash pattern, libzk composition surface.
Turn any GitHub repo into an agent service shop. Publish capabilities, accept async orders via Issues, deliver with Ed25519-signed receipts. First implementation of GAP (GitHub Agent-to-Agent Protocol).
Agent Bazaar: an agent-native marketplace inspired by NARA. ed25519 identity, signed Aapp calls, hash-chained ledger, and a live explorer dashboard.
Signed, scoped access receipts for applications after trusted payment or permission decisions.
Tamper Signal: signed receipts for vibe-coded data pipelines. Proves nobody changed your data, and shows the exact link if they did.
Bounded shell and CLI execution for AI agents: structured contracts, policy-gated execution, hardened Linux runtime enforcement, and signed receipts.
Claude Code skill for ScopeBlind trust stack — agent identity, MCP security, signed receipts, offline verification.
Conformance profile for AGT backends emitting Veritas Acta decision receipts. Field mappings, test vectors, and implementation registry.
Signed Asqav receipts for Claude Code sessions. Tamper evident evidence of what your coding agent did.
Shared test vectors for conformance between implementations of draft-farley-acta-signed-receipts
Proof of Agent Execution — the neutral trust layer issuing portable, signed execution credentials for AI agents (x402 · MCP · ERC-8004).
IETF Internet-Drafts for the Veritas Acta protocol: signed receipts, knowledge units, and restraint/adherence artifacts
Proofcore verifies signed Technocore receipts locally and turns public contribution evidence into portable agent passports. Browser-first, open source, and independent—not affiliated with FLOP Labs.
Permits and signed receipts for agent tool calls. One dispatch, one charge, verifiable offline.
To associate your repository with the signed-receipts topic, visit your repo's landing page and select "manage topics."